-
-
Notifications
You must be signed in to change notification settings - Fork 44
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Verifying Blobs (me, gbe, ifd) #114
Comments
I will close this issue considering https://github.com/osresearch/heads/blob/master/blobs/xx30/README Should answer all your questions. Please tag me if you think its an error me.bin, if extracted, will have idfferent hash, depending of the version that was backuped to be extracted. If the README is not precise enough, please open a PR (Pull request) modifying the information found there to correct what is there. If you consider that the wiki should be more precise then it is (pointing to the blobs dirs so that information is read there instead of deduplicating it for different revisions (xx20 and xx30 are different) also please tell. |
Reading your issue and understanding completely different things... You will need to clarify
I understand here that you used xx30 extract script, from a flashrom backup taken externally. This will extract ifd me and GBE from your backup and won't match hashes.txt found under xx30 blobs directory. Those are hashes of downloaded and extracted ROMs.
Here I am confused. Hashes from CircleCI has nothing to do directly with hashes from xx30 blobs. CircleCI uses the download and extract script, and uses those blobs to stitch the final coreboot ROM image, which is then splitted in bottom and top ROM images. Consequently I do not understand the question here.
GBE blob will contain a unique MAC if extracted. Otherwise the one in tree is generated as explained in README with a static Mac address as documented. Instructions are given to reproduce the result. |
hi @tlaurion maybe the issue title is not specific enough, but if the blobs are unique for each motherboard,
yes, after rechecking it, i realized that it doesn't contain checksum for blobs. then i think we can close the ticket. thanks and regards, |
This is output of download and extract script https://app.circleci.com/pipelines/github/osresearch/heads/473/workflows/da4c9e91-0281-47cb-a84d-067f33ec976a/jobs/5566/parallel-runs/0/steps/0-110 Ifd is coming from a sacrificed motherboard in tree, with regions modified to fit downloaded and extracted ME from latest firmware update from lenovo. GBE is a configuration blob, which was generated as explained in the README. |
If you extract fro backup, there is unfortunately no current way to verify the hashes, unless we would manually flash all possible versions of lenovo firmware updates and check me hashes. Ifd and GBE would of course always be different. Ifd contains motherboard relative info, while GBE will always be different since Mac address is always different, unless generated as the GBE.bin file in tree |
hi @tlaurion okay, thanks a lot for info regards, |
hi @tlaurion ,
i used Flashrom to dump blobs from X230,
then using ifdtool & me cleaner, to generate & clean the blobs (me, gbe, ifd),
also tried the script extract.sh,
but the blobs generated, have different checksum, with what's written in x230 blobs,
also different checksum, with hashes.txt in Circle CI,
is it expected ?
if not mistaken, each blob has unique MAC address,
so maybe, it is expected if the checksum are different,
but then, if they are different, then how to verify its integrity ?
Thanks and Regards,
The text was updated successfully, but these errors were encountered: